CVE-2026-12573 | BDVDB-2026-402776 Detail
ZohocorpDDI Central
Description#
Zoho Corporation ManageEngine DDI Central versions 6200 and below are vulnerable to Cisco IOS command injection via DHCP pool name leading to arbitrary commands on managed Cisco routers.
Impact#
CAPEC-88 – OS Command Injection
Weaknesses#
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.